airgate 0.2.3 → 0.2.4

package/dist/airgate.mjs

@@ -130,6 +130,12 @@ var init_pack = __esm({
 });
 
 // ../sandbox/src/types.ts
+var AIRLOCK_MODES = ["ask", "branches", "off"];
+var AIRLOCK_MODE_INFO = {
+  ask: { name: "ask", line: "everything waits for you: pushes, pull requests, email, deploys, outside calls" },
+  branches: { name: "work branches go through", line: "pushes to work branches go through on their own; main, force pushes, pull requests, email and deploys still wait" },
+  off: { name: "off", line: "everything goes through on its own. it's all still recorded in the airlock, but nothing waits for you" }
+};
 var SIZES = {
   small: { cpu: 8, memoryGb: 4, diskGb: 100 },
   standard: { cpu: 8, memoryGb: 8, diskGb: 100 },
@@ -2914,12 +2920,12 @@ function typeIn(src, options) {
     };
   });
 }
-function level(t, period2, mode) {
+function level(t, period2, mode2) {
   const u = mod(t, period2) / period2;
   const ease2 = (k) => smoothstep(0, 1, k);
-  if (mode === "in")
+  if (mode2 === "in")
     return u < 0.4 ? ease2(u / 0.4) : 1;
-  if (mode === "out")
+  if (mode2 === "out")
     return u < 0.6 ? 1 : 1 - ease2((u - 0.6) / 0.4);
   return u < 0.3 ? ease2(u / 0.3) : u < 0.6 ? 1 : u < 0.9 ? 1 - ease2((u - 0.6) / 0.3) : 0;
 }
@@ -2929,7 +2935,7 @@ var MODE_WHAT = { in: "in", out: "out", inout: "in and out" };
 function dissolve(src, options) {
   const o = optionsOf2(options, "dissolve", ["period", "mode", "blob", "edge", "seed"]);
   const period2 = num(o.period, "dissolve.period", 6, "seconds");
-  const mode = choice(o.mode, "dissolve.mode", MODES, "inout");
+  const mode2 = choice(o.mode, "dissolve.mode", MODES, "inout");
   const scale2 = 1 / num(o.blob, "dissolve.blob", 7, "atLeast1");
   const auto = o.edge === void 0;
   const edge = o.edge === "" ? "" : chars2(o.edge, "dissolve.edge", ".:", 1);
@@ -2947,10 +2953,10 @@ function dissolve(src, options) {
     return {
       moves: true,
       period: period2,
-      still: HELD[mode] * period2,
-      what: `dissolving ${MODE_WHAT[mode]}`,
+      still: HELD[mode2] * period2,
+      what: `dissolving ${MODE_WHAT[mode2]}`,
       setup: () => (t, s2, g) => {
-        const k = level(t, period2, mode);
+        const k = level(t, period2, mode2);
         if (k >= 1)
           return copy(s2, g);
         const front = k * (1 + band);
@@ -2971,7 +2977,7 @@ function dissolve(src, options) {
 function fade2(src, options) {
   const o = optionsOf2(options, "fade", ["period", "mode", "ramp"]);
   const period2 = num(o.period, "fade.period", 6, "seconds");
-  const mode = choice(o.mode, "fade.mode", MODES, "inout");
+  const mode2 = choice(o.mode, "fade.mode", MODES, "inout");
   const auto = o.ramp === void 0 || o.ramp === "auto";
   const chars3 = ramp(auto ? "standard" : o.ramp);
   if (chars3[0] !== " ")
@@ -2982,8 +2988,8 @@ function fade2(src, options) {
   return build2("fade", src, o, () => ({
     moves: true,
     period: period2,
-    still: HELD[mode] * period2,
-    what: `fading ${MODE_WHAT[mode]}`,
+    still: HELD[mode2] * period2,
+    what: `fading ${MODE_WHAT[mode2]}`,
     setup: () => {
       const steps = /* @__PURE__ */ new Map();
       const stepsOf = (c) => {
@@ -2996,7 +3002,7 @@ function fade2(src, options) {
         return v;
       };
       return (t, s2, g) => {
-        const k = level(t, period2, mode);
+        const k = level(t, period2, mode2);
         if (k >= 1)
           return copy(s2, g);
         for (let y = 0, i = 0; y < g.rows; y++)
@@ -7070,7 +7076,7 @@ function approvalRows(ctx, items, names) {
     ctx.ui.c(a.state === "pending" ? "warn" : a.state === "denied" || a.state === "failed" ? "bad" : "ok", a.state),
     a.kind,
     names.get(a.podId) ?? (a.requestedBy ? `${a.requestedBy}'s pod` : a.podId),
-    a.summary + (a.requestedBy ? ctx.ui.c("dim", ` \xB7 from ${a.requestedBy}`) : "") + (a.needsApprover && a.state === "pending" && !a.requestedBy ? ctx.ui.c("warn", " \xB7 waits for an approver") : ""),
+    a.summary + (a.auto ? ctx.ui.c("dim", ` \xB7 went through on its own (${a.auto})`) : "") + (a.requestedBy ? ctx.ui.c("dim", ` \xB7 from ${a.requestedBy}`) : "") + (a.needsApprover && a.state === "pending" && !a.requestedBy ? ctx.ui.c("warn", " \xB7 waits for an approver") : ""),
     ago(a.createdAt),
     ctx.ui.c("dim", a.id)
   ]);
@@ -7083,12 +7089,21 @@ var airlock = {
   name: "airlock",
   aliases: ["approvals"],
   group: "airlock \xB7 mask",
-  usage: "[--watch]",
-  summary: "what your pods want to send out: pending first, then recent",
-  example: "airgate airlock --watch",
-  notes: ["--watch follows the live stream and prints each new request as it arrives; ctrl-c to stop."],
-  flags: { watch: { type: "boolean", short: "w", help: "follow new requests" } },
+  usage: "[--watch] | mode [ask|branches|off|account] [--pod p]",
+  summary: "what your pods want to send out: pending first, then recent \xB7 how strict it is",
+  example: "airgate airlock mode branches",
+  notes: [
+    "--watch follows the live stream and prints each new request as it arrives; ctrl-c to stop.",
+    "mode: how much waits for you, like Claude Code's permission modes. ask (the default): everything waits. branches: pushes to work branches go through on their own; main, force pushes, pull requests, email and deploys still wait. off: everything goes through, still recorded.",
+    "mode with --pod sets one pod's own mode (account: back to the account's). a team's approver rules always win."
+  ],
+  flags: {
+    watch: { type: "boolean", short: "w", help: "follow new requests" },
+    pod: { type: "string", value: "pod", help: "with mode: this pod only" }
+  },
   async run(ctx) {
+    if (ctx.args.positionals[0] === "mode") return mode(ctx);
+    if (ctx.args.positionals.length) throw new UsageError("airgate airlock [--watch] | airgate airlock mode [ask|branches|off]");
     if (bool(ctx.args, "watch")) return watch(ctx);
     const [items, names] = await Promise.all([ctx.api.approvals(), podNames(ctx)]);
     const pending = items.filter((a) => a.state === "pending").sort((a, b2) => a.createdAt - b2.createdAt);
@@ -7107,6 +7122,30 @@ var airlock = {
     }
   }
 };
+async function mode(ctx) {
+  const want = ctx.args.positionals[1];
+  const podRef = str(ctx.args, "pod");
+  if (want && !AIRLOCK_MODES.includes(want) && !(podRef && want === "account")) {
+    throw new UsageError(`${AIRLOCK_MODES.join(", ")}${podRef ? " or account" : ""}`, "airgate airlock mode branches");
+  }
+  const account = (await ctx.api.me()).user.airlockMode ?? "ask";
+  const say = (who, m2, own) => {
+    ctx.ui.out(`${who}: ${m2 === "off" ? ctx.ui.c("warn", AIRLOCK_MODE_INFO[m2].name) : AIRLOCK_MODE_INFO[m2].name}${own ? "" : ctx.ui.c("dim", " (the account's)")}`);
+    ctx.ui.out(ctx.ui.c("dim", `  ${AIRLOCK_MODE_INFO[m2].line}`));
+    if (m2 === "off") ctx.ui.err(ctx.ui.ce("warn", "  nothing waits: an agent's push to main, a pull request or an email goes out on its own"));
+  };
+  if (podRef) {
+    let pod = await resolvePod(ctx, podRef);
+    if (want) pod = await ctx.api.updatePod(pod.id, { airlock: want === "account" ? null : want });
+    const m2 = pod.spec.airlock ?? account;
+    if (ctx.json) return ctx.ui.json({ pod: pod.spec.name, mode: m2, own: Boolean(pod.spec.airlock) });
+    return say(pod.spec.name, m2, Boolean(pod.spec.airlock));
+  }
+  const m = want ? (await ctx.api.updateMe({ airlockMode: want })).user.airlockMode ?? want : account;
+  if (ctx.json) return ctx.ui.json({ mode: m });
+  say("airlock", m, true);
+  if (!want) ctx.ui.out(ctx.ui.c("dim", `  change it: airgate airlock mode ${AIRLOCK_MODES.join("|")} \xB7 one pod: --pod <p>`));
+}
 async function watch(ctx) {
   const seen = /* @__PURE__ */ new Set();
   let first = true;
@@ -7562,7 +7601,7 @@ import { rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { resolve as resolve4 } from "node:path";
 
 // src/version.ts
-var VERSION = "0.2.3";
+var VERSION = "0.2.4";
 
 // src/commands/team.ts
 async function checkSimilar(ctx, task2) {
@@ -8136,6 +8175,7 @@ var launch = {
     env: { type: "string", value: "file", help: "a .env file: its keys become this pod's secrets before it boots" },
     "public-repo": { type: "boolean", help: "the repo is public: don't check it against your GitHub App" },
     mask: { type: "boolean", default: true, help: "mask model traffic (--no-mask to turn off)" },
+    airlock: { type: "string", value: "mode", choices: AIRLOCK_MODES, help: "this pod's airlock: ask | branches | off (default: your account's, see airgate airlock mode)" },
     undo: { type: "boolean", default: true, help: "checkpoint after every agent step (--no-undo to turn off)" },
     network: { type: "string", value: "policy", choices: NETWORK_NAMES, default: "allowlist", help: "allowlist | open | off" },
     allow: { type: "list", value: "host", help: "extra hosts for the allowlist (repeatable, or comma-separated)" },
@@ -8255,6 +8295,8 @@ function specFromFlags(ctx, defaults = {}) {
   if (jobs2.length) spec.jobs = jobs2;
   if (builtin) spec.builtinModel = true;
   if (builtin && model) spec.model = model;
+  const airlockMode = str(a, "airlock");
+  if (airlockMode) spec.airlock = airlockMode;
   return spec;
 }
 var info = {
@@ -8278,6 +8320,7 @@ var info = {
       ["network", s2.network + (s2.network === "allowlist" && s2.allow?.length ? ` \xB7 ${s2.allow.join(", ")}` : "")],
       ["mask", s2.masking ? `on${s2.maskTerms?.length ? ` \xB7 ${s2.maskTerms.length} terms` : ""}` : ctx.ui.c("warn", "off")],
       ["undo", s2.autoCheckpoint ? "auto checkpoints" : "manual only"],
+      ["airlock", s2.airlock ? s2.airlock === "off" ? ctx.ui.c("warn", AIRLOCK_MODE_INFO.off.name) : AIRLOCK_MODE_INFO[s2.airlock].name : "as the account"],
       ["auto-stop", s2.autoStopMinutes === 0 ? "keep awake (never sleeps: every hour counts, ~720 a month)" : `sleeps after ${s2.autoStopMinutes ?? 10} min idle`]
     ];
     if (s2.repo) rows2.push(["repo", s2.repo]);
@@ -10675,17 +10718,18 @@ var TOOLS = [
   },
   {
     name: "pod_settings",
-    description: "Change a pod's network after launch (open | allowlist | off, extra allowlist hosts) or switch its AI off/on (aiOff: no model calls at all). Applies immediately. Only when the user asked for it.",
-    inputSchema: obj({ pod: POD, network: s("open | allowlist | off", { enum: ["open", "allowlist", "off"] }), allow: { type: "array", items: { type: "string" }, description: "extra allowlist hosts (replaces the list)" }, aiOff: b("true switches the pod's AI off; false back on") }, ["pod"]),
+    description: "Change a pod's network after launch (open | allowlist | off, extra allowlist hosts), switch its AI off/on (aiOff: no model calls at all), or set its airlock (ask | branches | off | account). Applies immediately. Only when the user asked for it; never loosen the airlock on your own.",
+    inputSchema: obj({ pod: POD, network: s("open | allowlist | off", { enum: ["open", "allowlist", "off"] }), allow: { type: "array", items: { type: "string" }, description: "extra allowlist hosts (replaces the list)" }, aiOff: b("true switches the pod's AI off; false back on"), airlock: s("ask (everything waits) | branches (pushes to work branches go through) | off (nothing waits) | account (the account's mode)", { enum: ["ask", "branches", "off", "account"] }) }, ["pod"]),
     async call(ctx, a) {
       const p = await resolvePod(ctx, need(a, "pod"));
       const patch = {};
       if (typeof a.network === "string") patch.network = a.network;
       if (Array.isArray(a.allow)) patch.allow = a.allow.map(String);
       if (typeof a.aiOff === "boolean") patch.aiOff = a.aiOff;
-      if (!Object.keys(patch).length) throw new UsageError("nothing to change: network, allow or aiOff");
+      if (typeof a.airlock === "string") patch.airlock = a.airlock === "account" ? null : a.airlock;
+      if (!Object.keys(patch).length) throw new UsageError("nothing to change: network, allow, aiOff or airlock");
       const pod = await ctx.api.updatePod(p.id, patch);
-      return { name: pod.spec.name, network: pod.spec.network, allow: pod.spec.allow ?? [], aiOff: Boolean(pod.spec.aiOff) };
+      return { name: pod.spec.name, network: pod.spec.network, allow: pod.spec.allow ?? [], aiOff: Boolean(pod.spec.aiOff), airlock: pod.spec.airlock ?? "account" };
     }
   },
   {
@@ -12890,16 +12934,16 @@ var network = {
     remove: { type: "string", value: "host", help: "remove hosts (comma separated)" }
   },
   async run(ctx) {
-    const [ref, mode] = ctx.args.positionals;
+    const [ref, mode2] = ctx.args.positionals;
     if (!ref) throw new UsageError("airgate network <pod> [open|allowlist|off]");
-    if (mode && !["open", "allowlist", "off"].includes(mode)) throw new UsageError("open, allowlist or off");
+    if (mode2 && !["open", "allowlist", "off"].includes(mode2)) throw new UsageError("open, allowlist or off");
     const pod = await resolvePod(ctx, ref);
     const list2 = (v) => (v ?? "").split(",").map((h) => h.trim().toLowerCase()).filter(Boolean);
     let allow = pod.spec.allow ?? [];
     if (str(ctx.args, "allow") !== void 0) allow = list2(str(ctx.args, "allow"));
     allow = [.../* @__PURE__ */ new Set([...allow, ...list2(str(ctx.args, "add"))])].filter((h) => !list2(str(ctx.args, "remove")).includes(h));
-    const changed = mode || ["allow", "add", "remove"].some((k) => str(ctx.args, k) !== void 0);
-    const p = changed ? await ctx.api.updatePod(pod.id, { ...mode ? { network: mode } : {}, allow }) : pod;
+    const changed = mode2 || ["allow", "add", "remove"].some((k) => str(ctx.args, k) !== void 0);
+    const p = changed ? await ctx.api.updatePod(pod.id, { ...mode2 ? { network: mode2 } : {}, allow }) : pod;
     if (ctx.json) return ctx.ui.json({ network: p.spec.network, allow: p.spec.allow ?? [], aiOff: Boolean(p.spec.aiOff) });
     ctx.ui.out(`${p.spec.name}: ${p.spec.network}${p.spec.network === "allowlist" && (p.spec.allow ?? []).length ? ` + ${(p.spec.allow ?? []).join(", ")}` : ""}${p.spec.aiOff ? ctx.ui.c("warn", " \xB7 AI off") : ""}${changed ? ctx.ui.c("dim", " (applied now)") : ""}`);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "airgate",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Give your AI its own computer: the airgate command line.",
   "type": "module",
   "bin": {